Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft
File: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft (raw, json)
Hash identifier: NaZtfISd9yVNQZMDpwM0WNILJPSfY1FcNtzh4RGQr48=
Subject key identifier: 0B:5C:FE:BB:D6:C9:2C:15:E9:D8:C0:10:E9:8B:55:E2:FE:E3:51:71
Authority key identifier: E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69
Certificate issuer: /CN=A9170DD8/serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169
Certificate serial: 58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft
Manifest number: 54
Signing time: Fri 31 Jan 2025 06:18:05 +0000
Manifest this update: Fri 31 Jan 2025 06:18:05 +0000
Manifest next update: Fri 07 Feb 2025 06:18:05 +0000
Files and hashes: 1: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl (hash: eC+X3ADcF+tQ6/JXOoCiefZyQs5YueXMjmO0kZQMlso=)
2: 4D06CD2C667411EF8E723587C4F9AE02.roa (hash: 4PdtbIsL2ZotyQ7lOujn962oNOjC34OWUPtAk2nb5/I=)
3: 4CA4BE8E667411EF8E723587C4F9AE02.roa (hash: 8qwHnAzkWpQMSqbxW4gRTYW6uWniUVjWaHfJJJJlxJ8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170DD8/serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169
Validity
Not Before: Jan 31 06:18:05 2025 GMT
Not After : Feb 7 06:18:05 2025 GMT
Subject: CN=679c6b1d-3b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f9:7f:49:f9:0f:be:0b:15:33:c0:ef:53:97:
e6:d2:d8:f9:df:7d:59:5a:f0:9a:e7:4d:89:97:8f:
9f:cd:af:55:f7:28:54:c2:97:40:f5:df:2f:f9:9f:
0d:72:d6:1e:f5:f4:0c:77:8d:b4:e3:7c:69:7d:94:
24:55:26:b8:56:1d:54:0c:1d:a2:62:9f:5d:bc:24:
5e:41:00:e2:e4:01:f5:e0:6e:90:86:df:d9:5a:88:
23:3a:f5:3b:75:61:5e:ac:e6:c9:7c:27:31:28:81:
5e:c6:3e:79:9d:f8:13:18:08:8e:e4:0b:5f:e4:5c:
77:7a:2f:67:1e:c9:47:eb:29:78:12:c6:41:9c:a6:
50:5e:19:9f:85:27:1d:0b:fc:74:3c:b4:b0:a3:bd:
88:bb:70:af:ff:35:95:45:11:87:c5:c1:72:d8:e4:
ae:0a:2b:1e:31:09:62:c5:a4:a7:87:1c:fc:f4:e5:
10:71:38:aa:ee:9a:26:30:b0:ae:c3:f7:1d:9e:2b:
0f:61:2f:0c:1a:6b:c0:44:c3:d0:01:96:a2:f2:a7:
85:81:78:b9:aa:9e:ff:0b:97:f9:87:85:c3:f1:4b:
5d:04:57:5b:fc:57:66:c9:1b:83:91:ec:cb:c4:ca:
cb:4e:3c:db:b4:4f:60:51:9f:34:b9:6d:88:c2:6e:
d4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:5C:FE:BB:D6:C9:2C:15:E9:D8:C0:10:E9:8B:55:E2:FE:E3:51:71
X509v3 Authority Key Identifier:
keyid:E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:06:10:79:b1:39:a1:a1:7c:8b:71:5e:7e:e0:e1:dd:c8:fc:
6e:cd:50:e5:54:98:d7:d6:11:6d:be:ee:24:fa:f5:a5:ae:43:
71:4e:7a:d1:42:01:6a:b3:c7:a0:ed:96:57:b6:71:7e:a0:e0:
27:1b:c0:4a:cd:b9:b3:36:c9:4f:11:4f:92:b3:98:02:3a:56:
64:f2:d8:ef:eb:0c:05:d0:dc:8d:8e:87:35:99:6d:80:5a:3c:
d0:9e:61:00:94:72:f8:08:a5:d2:5d:53:27:3a:63:bd:84:35:
13:65:dc:45:3f:3b:29:22:a1:8a:cf:c3:2f:5b:a9:66:2f:f3:
64:c5:3f:b2:77:79:20:df:dd:bd:e1:d7:23:ee:d4:64:73:23:
b0:14:47:39:22:d1:4f:b0:27:2c:72:8f:88:2f:b6:fe:85:b1:
8d:4e:e7:1d:7d:f5:01:14:34:77:72:8b:2e:55:76:ac:eb:84:
fb:4b:6c:ab:5e:1e:2c:3a:4b:57:37:75:61:2d:4c:1b:4f:c7:
4e:93:5f:97:15:d9:f0:87:90:eb:f7:83:5b:95:cb:42:16:39:
c5:4e:45:8f:a7:3b:32:2e:22:04:69:05:aa:a4:cb:a4:0f:99:
a4:07:69:e8:86:ae:84:fd:ce:e7:e8:d6:1a:8d:1b:59:3f:f1:
47:bf:29:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:43:45 2025 by rpki-client